fix(deploy): always set git_forges

Based on the instructions in packit/private#60, we should run

    DEPLOYMENT=prod TAGS=secrets make deploy

to update the Packit Service config after rotating the tokens, but the
tasks that fetch the dictionary containing the git-forge tokens are
skipped because of the `TAGS=secrets`, therefore mark the affected tasks
with `tags: [always]` to ensure the facts are populated.

Related to packit/private#60

Signed-off-by: Matej Focko <[email protected]>

Author: mfocko

tasks/set-facts.yml

@@ -49,10 +49,14 @@
     redis_hostname: "{{ kv_database }}"
 
 - name: Set Bitwarden URI
+  tags:
+    - always
   ansible.builtin.set_fact:
     bw_uri: "ansible://{{ service }}/{{ deployment }}"
 
 - name: Fetch git forges
   when: deployment != "dev"
+  tags:
+    - always
   ansible.builtin.set_fact:
     git_forges: "{{ lookup('community.general.bitwarden', bw_uri + '/git', search='') }}"